Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146416.roa
File:                     AS146416.roa (raw, json)
Hash identifier:          4p9KRUyCDos2hZunhNpkGx0yj4KhCSclQyWdEtWCxhQ=
Subject key identifier:   C1:D6:E3:1F:51:30:14:A7:DB:38:7C:F8:4D:E0:DF:68:FA:51:D1:94
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5ED24C92E9D9770751468AEC5F67FA59D92899E5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146416.roa
Signing time:             Tue 26 May 2026 06:30:28 +0000
ROA not before:           Tue 26 May 2026 06:25:28 +0000
ROA not after:            Tue 25 May 2027 06:30:28 +0000
asID:                     146416
IP address blocks:        240a:aeb6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d2:4c:92:e9:d9:77:07:51:46:8a:ec:5f:67:fa:59:d9:28:99:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 06:25:28 2026 GMT
            Not After : May 25 06:30:28 2027 GMT
        Subject: CN=C1D6E31F513014A7DB387CF84DE0DF68FA51D194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c3:89:aa:30:9a:7e:fe:af:c7:db:ef:af:d3:
                    1c:4c:66:5d:33:f5:61:ca:24:44:ab:bd:79:82:87:
                    b8:2d:1c:85:42:73:7c:07:99:93:19:7b:05:63:66:
                    55:d2:c9:dc:07:ab:97:0d:81:6f:7a:e6:2a:a9:fc:
                    af:51:e2:17:a2:b8:ab:a2:83:84:92:de:5f:4b:92:
                    f7:7c:8d:bb:b8:3f:c8:13:ce:4e:08:ca:7f:ba:00:
                    d8:2c:6e:a1:d3:28:ec:df:14:c2:38:67:ee:f8:f8:
                    97:a4:62:e6:6b:99:c3:78:06:3d:f2:59:ea:44:9c:
                    32:67:8e:32:6e:0b:e4:0a:bd:9e:02:be:11:3d:45:
                    20:ce:df:40:cc:dd:3a:e8:89:33:90:f9:ea:fb:27:
                    c5:92:76:b3:3e:74:08:fa:f4:4a:59:48:18:74:a0:
                    30:88:8a:db:d2:5a:dc:7b:32:49:fd:1b:1b:fb:6b:
                    11:11:d7:a9:1b:26:64:02:99:6b:70:5f:50:a9:7d:
                    b3:9e:f3:c7:93:8f:ac:a9:e3:e5:d0:30:a8:36:f8:
                    e5:55:a5:93:22:bf:d8:42:4e:b9:91:e0:9f:16:77:
                    a7:d1:70:06:c3:02:60:78:bc:14:b9:31:11:02:d3:
                    de:d1:10:c9:ed:71:ac:d1:0f:ff:bc:6e:f9:d6:81:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D6:E3:1F:51:30:14:A7:DB:38:7C:F8:4D:E0:DF:68:FA:51:D1:94
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146416.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:aeb6::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:e3:ef:a3:4e:58:7c:b6:2a:3c:98:52:9c:cd:c7:0c:02:51:
         32:3d:4b:dc:42:9c:2e:f9:ea:4f:b5:c4:a6:e2:6a:d1:f2:36:
         a2:86:ff:bb:5e:da:e8:a4:52:17:d6:ad:c8:b8:82:8c:f3:4b:
         ad:67:94:03:78:25:39:3e:b3:55:a7:b5:3e:1f:fe:dc:bf:ac:
         9e:ca:e3:ef:f0:83:5a:f3:13:6a:1a:11:93:26:90:ae:bb:c8:
         1a:e7:02:17:64:df:be:11:00:7d:f9:47:95:6e:87:d5:53:a9:
         ed:e7:aa:f3:ee:6c:47:50:a9:7b:ae:43:e3:9d:a9:22:f6:e5:
         d3:9c:9f:b3:c6:6a:3f:e4:0c:e3:c9:63:a8:1a:95:31:72:78:
         0c:90:bc:34:91:ee:2e:33:63:d7:00:df:ad:a3:fd:bf:b5:a2:
         31:69:a0:7b:77:54:8d:eb:19:58:56:0c:2d:05:77:47:1d:48:
         6c:03:47:f5:81:3a:b2:98:06:e0:c9:5f:03:de:ad:bf:bf:5d:
         61:e7:8b:94:8e:13:41:b9:aa:41:f1:1f:ba:01:df:1e:cd:c2:
         7e:ed:e7:82:4b:35:41:bb:64:0d:10:d9:a1:17:c8:19:28:34:
         a1:53:1a:33:48:02:e5:55:fa:8f:da:bf:0c:77:36:3d:14:bf:
         4a:87:a4:b7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXtJMkunZdwdRRorsX2f6WdkomeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MjhaFw0yNzA1MjUwNjMwMjhaMDMxMTAvBgNV
BAMTKEMxRDZFMzFGNTEzMDE0QTdEQjM4N0NGODRERTBERjY4RkE1MUQxOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaw4mqMJp+/q/H2++v0xxMZl0z
9WHKJESrvXmCh7gtHIVCc3wHmZMZewVjZlXSydwHq5cNgW965iqp/K9R4heiuKui
g4SS3l9Lkvd8jbu4P8gTzk4Iyn+6ANgsbqHTKOzfFMI4Z+74+JekYuZrmcN4Bj3y
WepEnDJnjjJuC+QKvZ4CvhE9RSDO30DM3TroiTOQ+er7J8WSdrM+dAj69EpZSBh0
oDCIitvSWtx7Mkn9Gxv7axER16kbJmQCmWtwX1CpfbOe88eTj6yp4+XQMKg2+OVV
pZMiv9hCTrmR4J8Wd6fRcAbDAmB4vBS5MREC097REMntcazRD/+8bvnWgZwxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUwdbjH1EwFKfbOHz4TeDfaPpR0ZQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NDE2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqutjANBgkqhkiG9w0BAQsFAAOCAQEAU+Pv
o05YfLYqPJhSnM3HDAJRMj1L3EKcLvnqT7XEpuJq0fI2oob/u17a6KRSF9atyLiC
jPNLrWeUA3glOT6zVae1Ph/+3L+snsrj7/CDWvMTahoRkyaQrrvIGucCF2TfvhEA
fflHlW6H1VOp7eeq8+5sR1Cpe65D452pIvbl05yfs8ZqP+QM48ljqBqVMXJ4DJC8
NJHuLjNj1wDfraP9v7WiMWmge3dUjesZWFYMLQV3Rx1IbANH9YE6spgG4MlfA96t
v79dYeeLlI4TQbmqQfEfugHfHs3Cfu3ngks1QbtkDRDZoRfIGSg0oVMaM0gC5VX6
j9q/DHc2PRS/Soektw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:59 2026 by rpki-client